chore(deps): bump the cargo-dependencies group across 1 directory with 10 updates

Bumps the cargo-dependencies group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [skrifa](https://github.com/googlefonts/fontations) | `0.47.0` | `0.49.0` | | [harfrust](https://github.com/harfbuzz/harfrust) | `0.13.3` | `0.15.0` | | [brotli-decompressor](https://github.com/dropbox/rust-brotli-decompressor) | `5.0.3` | `6.2.0` | | [vello_cpu](https://github.com/linebender/vello) | `0.2.0` | `0.3.0` | | [quick-xml](https://github.com/tafia/quick-xml) | `0.41.0` | `0.42.0` | | [zip](https://github.com/zip-rs/zip2) | `3.0.0` | `9.1.0` | | [getrandom](https://github.com/rust-random/getrandom) | `0.3.4` | `0.4.3` | | [hayro-syntax](https://github.com/LaurenzV/hayro) | `0.7.2` | `0.8.0` | | [hayro-interpret](https://github.com/LaurenzV/hayro) | `0.7.0` | `0.8.0` | | [clipboard-win](https://github.com/DoumanAsh/clipboard-win) | `5.4.1` | `5.4.3` | Updates `skrifa` from 0.47.0 to 0.49.0 - [Release notes](https://github.com/googlefonts/fontations/releases) - [Changelog](https://github.com/googlefonts/fontations/blob/main/docs/RELEASE.md) - [Commits](https://github.com/googlefonts/fontations/compare/skrifa-v0.47.0...skrifa-v0.49.0) Updates `harfrust` from 0.13.3 to 0.15.0 - [Release notes](https://github.com/harfbuzz/harfrust/releases) - [Changelog](https://github.com/harfbuzz/harfrust/blob/main/CHANGELOG.md) - [Commits](https://github.com/harfbuzz/harfrust/compare/0.13.3...0.15.0) Updates `brotli-decompressor` from 5.0.3 to 6.2.0 - [Release notes](https://github.com/dropbox/rust-brotli-decompressor/releases) - [Commits](https://github.com/dropbox/rust-brotli-decompressor/compare/5.0.3...6.2.0) Updates `vello_cpu` from 0.2.0 to 0.3.0 - [Release notes](https://github.com/linebender/vello/releases) - [Changelog](https://github.com/linebender/vello/blob/v0.3.0/CHANGELOG.md) - [Commits](https://github.com/linebender/vello/compare/v0.2.0...v0.3.0) Updates `quick-xml` from 0.41.0 to 0.42.0 - [Release notes](https://github.com/tafia/quick-xml/releases) - [Changelog](https://github.com/tafia/quick-xml/blob/master/Changelog.md) - [Commits](https://github.com/tafia/quick-xml/compare/v0.41.0...v0.42.0) Updates `zip` from 3.0.0 to 9.1.0 - [Release notes](https://github.com/zip-rs/zip2/releases) - [Changelog](https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md) - [Commits](https://github.com/zip-rs/zip2/compare/v3.0.0...v9.1.0) Updates `getrandom` from 0.3.4 to 0.4.3 - [Changelog](https://github.com/rust-random/getrandom/blob/master/CHANGELOG.md) - [Commits](https://github.com/rust-random/getrandom/compare/v0.3.4...v0.4.3) Updates `hayro-syntax` from 0.7.2 to 0.8.0 - [Commits](https://github.com/LaurenzV/hayro/commits/hayro-syntax-v0.8.0) Updates `hayro-interpret` from 0.7.0 to 0.8.0 - [Commits](https://github.com/LaurenzV/hayro/compare/hayro-interpret-v0.7.0...hayro-interpret-v0.8.0) Updates `clipboard-win` from 5.4.1 to 5.4.3 - [Commits](https://github.com/DoumanAsh/clipboard-win/commits) --- updated-dependencies: - dependency-name: brotli-decompressor dependency-version: 6.1.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: cargo-dependencies - dependency-name: clipboard-win dependency-version: 5.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-dependencies - dependency-name: getrandom dependency-version: 0.4.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-dependencies - dependency-name: harfrust dependency-version: 0.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-dependencies - dependency-name: hayro-interpret dependency-version: 0.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-dependencies - dependency-name: hayro-syntax dependency-version: 0.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-dependencies - dependency-name: quick-xml dependency-version: 0.42.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-dependencies - dependency-name: skrifa dependency-version: 0.49.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-dependencies - dependency-name: vello_cpu dependency-version: 0.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-dependencies - dependency-name: zip dependency-version: 9.0.5 dependency-type: direct:production update-type: version-update:semver-major dependency-group: cargo-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
2026-10-29 12:57:09 -06:00 · 2026-10-29 10:12:29 +00:00
4 changed files with 152 additions and 104 deletions
@@ -155,13 +155,28 @@ version = "2.0.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "cc7bb162ec39d46ab1ca8c77bf72e890535becd1751bb45f64c597edb4c8c6b3"

+[[package]]
+name = "alloc-no-stdlib"
+version = "3.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c2fb6cfd47bf496ff64095c20eaba0c201404ee38714d4142fcfa1dc334fcc7a"
+
 [[package]]
 name = "alloc-stdlib"
 version = "0.2.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "0e76a019e91224d279006ff972f1e984179a6e9feb050adba6ce8274aef23195"
 dependencies = [
- "alloc-no-stdlib",
+ "alloc-no-stdlib 2.0.4",
+]
+
+[[package]]
+name = "alloc-stdlib"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b5c1865780388bfa186411ab5f247819487fc4864c6e9c3106611fa347586e1"
+dependencies = [
+ "alloc-no-stdlib 3.0.0",
 ]

 [[package]]
@@ -210,15 +225,6 @@ version = "1.0.104"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "330a5ed07fa54e4702c9d6c4174f74427fc0ef6e214bbd677ae50a5099946470"

-[[package]]
-name = "arbitrary"
-version = "1.4.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c3d036a3c4ab069c7b410a2ce876bd74808d2d0888a82667669f8e783a898bf1"
-dependencies = [
- "derive_arbitrary",
-]
-
 [[package]]
 name = "arboard"
 version = "3.7.0"
@@ -614,9 +620,9 @@ version = "8.0.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "5cc91aac060a7a1e25823bdccbfb6af1875b88f17c6daac97894eed8207166b3"
 dependencies = [
- "alloc-no-stdlib",
- "alloc-stdlib",
- "brotli-decompressor",
+ "alloc-no-stdlib 2.0.4",
+ "alloc-stdlib 0.2.4",
+ "brotli-decompressor 5.0.3",
 ]

 [[package]]
@@ -625,8 +631,18 @@ version = "5.0.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "3a32acac15fe1967bc3986b2a6347dffc965602354ea6f450ad07e8bfd253583"
 dependencies = [
- "alloc-no-stdlib",
- "alloc-stdlib",
+ "alloc-no-stdlib 2.0.4",
+ "alloc-stdlib 0.2.4",
+]
+
+[[package]]
+name = "brotli-decompressor"
+version = "6.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "34c6783f42c21c952ad7112b354f0ba2f10760e9decea5b1b60523d6e270faaf"
+dependencies = [
+ "alloc-no-stdlib 3.0.0",
+ "alloc-stdlib 0.3.0",
 ]

 [[package]]
@@ -809,9 +825,9 @@ dependencies = [

 [[package]]
 name = "clipboard-win"
-version = "5.4.1"
+version = "5.4.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bde03770d3df201d4fb868f2c9c59e66a3e4e2bd06692a0fe701e7103c7e84d4"
+checksum = "052af7878466feccda12ba7a6a67d019d712f296809559b47c12c8cc196d3a9a"
 dependencies = [
 "error-code",
 ]
@@ -1103,7 +1119,7 @@ dependencies = [
 "verifysign",
 "winreg",
 "winsafe",
- "zip 9.1.0",
+ "zip",
 ]

 [[package]]
@@ -1250,17 +1266,6 @@ version = "0.5.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9e9de72ce2ad1f90dc62fa25f0f430ef85eb4b0d8fa0be4f30373bc40a21d28e"

-[[package]]
-name = "derive_arbitrary"
-version = "1.4.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1e567bd82dcff979e4b03460c307b3cdc9e96fde3d73bed1496d2bc75d9dd62a"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn 2.0.119",
-]
-
 [[package]]
 name = "dify"
 version = "0.8.0"
@@ -1567,7 +1572,7 @@ dependencies = [
 "ecolor",
 "emath",
 "epaint_default_fonts",
- "font-types 0.12.6",
+ "font-types 0.12.7",
 "harfrust 0.12.0",
 "log",
 "nohash-hasher",
@@ -1580,7 +1585,7 @@ dependencies = [
 "unicode-general-category",
 "unicode-properties",
 "unicode-segmentation",
- "vello_cpu",
+ "vello_cpu 0.2.0",
 ]

 [[package]]
@@ -1666,6 +1671,12 @@ version = "0.4.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b97b65636e5b9ef369943878ac74335ba1c55c1cb6adbf1e2c293c624248d693"

+[[package]]
+name = "fearless_simd"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f4beca3cb2444e3304ac30843cc091f44ed58932353cd492ce740067bfce6b12"
+
 [[package]]
 name = "fearless_simd"
 version = "1.1.0"
@@ -1793,9 +1804,9 @@ dependencies = [

 [[package]]
 name = "font-types"
-version = "0.12.6"
+version = "0.12.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6c92d9081c7ab3bd83ef1eecdfad090f3d966e3ce74106779664114cfe1a6274"
+checksum = "835ae9d781464a79026cde387f9cbc650c9a4909d7cf7e658b127e3c35d2f35d"
 dependencies = [
 "bytemuck",
 ]
@@ -1965,11 +1976,9 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "899def5c37c4fd7b2664648c28120ecec138e4d395b459e5ca34f9cce2dd77fd"
 dependencies = [
 "cfg-if",
- "js-sys",
 "libc",
 "r-efi 5.3.0",
 "wasip2",
- "wasm-bindgen",
 ]

 [[package]]
@@ -2012,6 +2021,22 @@ name = "glifo"
 version = "0.3.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "282a26c1e23de04bdab3e34a21b6f877a479b96737792516b9b8b8f69b6661be"
+dependencies = [
+ "bytemuck",
+ "foldhash 0.2.0",
+ "hashbrown 0.17.1",
+ "log",
+ "peniko",
+ "skrifa 0.44.0",
+ "smallvec",
+ "vello_common 0.2.0",
+]
+
+[[package]]
+name = "glifo"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9f1218dedd5348c1b166ec3b8b3cbca49d2f527bd43b3fa072ea5123c523ed3f"
 dependencies = [
 "bytemuck",
 "foldhash 0.2.0",
@@ -2021,7 +2046,7 @@ dependencies = [
 "png",
 "skrifa 0.44.0",
 "smallvec",
- "vello_common",
+ "vello_common 0.3.0",
 ]

 [[package]]
@@ -2170,15 +2195,15 @@ dependencies = [

 [[package]]
 name = "harfrust"
-version = "0.13.3"
+version = "0.15.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "948d0741125ba89cd3e1c23e5642415b6ade7e1d29d67ba25fb925b533e989d6"
+checksum = "865dcc4105d51c323d8fedbb2d75b5e9c8ecddf5613f74c82f851d0afbc97114"
 dependencies = [
 "bitflags 2.13.2",
 "bytemuck",
- "once_cell",
- "read-fonts 0.43.3",
+ "read-fonts 0.46.0",
 "smallvec",
+ "yoke",
 ]

 [[package]]
@@ -2210,12 +2235,6 @@ dependencies = [
 "foldhash 0.2.0",
 ]

-[[package]]
-name = "hayro-ccitt"
-version = "0.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9f4d0e94ddd48749f06bbe4e5389fb9799a0c45bcaf00495042076ef05e3241a"
-
 [[package]]
 name = "hayro-ccitt"
 version = "0.4.0"
@@ -2234,9 +2253,9 @@ dependencies = [

 [[package]]
 name = "hayro-interpret"
-version = "0.7.0"
+version = "0.8.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f2613d0406898995042d0794c4245b2f2fba1246490c8ac593769bba6551129d"
+checksum = "ac9df074ff163a63864cec9b0bf640ccbff8abf4e44481df7369ce0ac172ffbe"
 dependencies = [
 "bitflags 2.13.2",
 "hayro-cmap",
@@ -2246,7 +2265,7 @@ dependencies = [
 "phf 0.13.1",
 "rustc-hash 2.1.3",
 "siphasher",
- "skrifa 0.42.1",
+ "skrifa 0.46.2",
 "smallvec",
 "yoke",
 ]
@@ -2258,16 +2277,16 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "000e025850f4592ddcaee85640db70704151f2bafd43b6f431aa5b6a2c6a35a9"
 dependencies = [
 "fearless_simd 1.1.0",
- "hayro-ccitt 0.4.0",
+ "hayro-ccitt",
 ]

 [[package]]
 name = "hayro-jpeg2000"
-version = "0.3.5"
+version = "0.4.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c75ab947623ef4ccaa7acf0579edf7cbb5a73838e3839a7be73335e522f433a1"
+checksum = "122c5f834c37a2260b9c851bb8be685cf539b2a8b94b704a931ef7d2525d5835"
 dependencies = [
- "fearless_simd 0.4.1",
+ "fearless_simd 1.1.0",
 ]

 [[package]]
@@ -2278,12 +2297,12 @@ checksum = "885c5ef0654933139a9b9546fc2c69e18d37f38aa2520f079092b1be18f1fcaa"

 [[package]]
 name = "hayro-syntax"
-version = "0.7.2"
+version = "0.8.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0edeafd70aa2db743de8ede8637d07ec87db05efe69cde371d03f1b185fcef27"
+checksum = "6cdc818d8d265dcb42081d488f7599df4f73fb79e9d347ecedcd3c23809d2026"
 dependencies = [
 "flate2",
- "hayro-ccitt 0.3.0",
+ "hayro-ccitt",
 "hayro-jbig2",
 "hayro-jpeg2000",
 "memchr",
@@ -4192,7 +4211,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "046a7d674daf459825b32f5062056d6882db0d2f5a479fbd76ccfc870ac18709"
 dependencies = [
 "bytemuck",
- "font-types 0.12.6",
+ "font-types 0.12.7",
 "once_cell",
 ]

@@ -4203,19 +4222,22 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "005c8acf251756c478b0bf402885bfd88a1476020c4c7e6060edc1aa68da38ea"
 dependencies = [
 "bytemuck",
- "font-types 0.12.6",
+ "font-types 0.12.7",
 "once_cell",
 ]

 [[package]]
 name = "read-fonts"
-version = "0.44.0"
+version = "0.46.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d5a0cf4bb6cbce4c29756270d189a5e400ac05e91192161d83a0bcb6e68492e8"
+checksum = "bdaa4fffe9ff3ca2c353fa9729792805b9b3e324695ff5a081f860612e81b330"
 dependencies = [
 "bytemuck",
- "font-types 0.12.6",
+ "foldhash 0.2.0",
+ "font-types 0.12.7",
 "once_cell",
+ "smallvec",
+ "yoke",
 ]

 [[package]]
@@ -4967,12 +4989,25 @@ dependencies = [

 [[package]]
 name = "skrifa"
-version = "0.47.0"
+version = "0.46.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "526e654b303ff4ad73a5a40b25de2b3ce3d039c5e3b6da5f89ae6e57004cb40f"
+checksum = "d4febebda507fb889c545a37a135517769d1391941013561292897961d1887d6"
 dependencies = [
 "bytemuck",
- "read-fonts 0.44.0",
+ "read-fonts 0.43.3",
+]
+
+[[package]]
+name = "skrifa"
+version = "0.49.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a7459fb60888ad9a5f367dd293fa2fb9df142cb451aa6bfd6cd66a7d6a9b739d"
+dependencies = [
+ "bytemuck",
+ "once_cell",
+ "read-fonts 0.46.0",
+ "smallvec",
+ "yoke",
 ]

 [[package]]
@@ -5788,6 +5823,21 @@ dependencies = [
 "guillotiere",
 "log",
 "peniko",
+ "smallvec",
+ "thiserror 2.0.21",
+]
+
+[[package]]
+name = "vello_common"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "73c2fbe53548bcd25c8ff42f75a93770a8611a16b37bee56d7ef7b44e36027f1"
+dependencies = [
+ "bytemuck",
+ "fearless_simd 0.7.0",
+ "guillotiere",
+ "log",
+ "peniko",
 "png",
 "smallvec",
 "thiserror 2.0.21",
@@ -5798,16 +5848,28 @@ name = "vello_cpu"
 version = "0.2.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "ace506ca414548966fcf3c283be94eb1cad8254de488791ee698bf438b0890a9"
+dependencies = [
+ "bytemuck",
+ "glifo 0.3.0",
+ "hashbrown 0.17.1",
+ "vello_common 0.2.0",
+]
+
+[[package]]
+name = "vello_cpu"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed1fec424fbba6acf6cbc78bb526447eb77590d95f40419d598870fe37535212"
 dependencies = [
 "bytemuck",
 "crossbeam-channel",
- "glifo",
+ "glifo 0.4.0",
 "hashbrown 0.17.1",
 "ordered-channel",
 "png",
 "rayon",
 "thread_local",
- "vello_common",
+ "vello_common 0.3.0",
 ]

 [[package]]
@@ -6658,7 +6720,7 @@ dependencies = [
 "eframe",
 "egui",
 "fmv-macos-events",
- "getrandom 0.3.4",
+ "getrandom 0.4.3",
 "log",
 "objc2 0.6.5",
 "objc2-app-kit 0.3.2",
@@ -6736,12 +6798,12 @@ dependencies = [
 "base64 0.23.1",
 "cfb",
 "chrono",
- "getrandom 0.3.4",
+ "getrandom 0.4.3",
 "hmac",
 "image",
 "log",
 "proptest",
- "quick-xml 0.41.0",
+ "quick-xml 0.42.0",
 "sha1 0.11.0",
 "sha2 0.11.1",
 "thiserror 2.0.21",
@@ -6749,7 +6811,7 @@ dependencies = [
 "wordcraft-doc",
 "wordcraft-geom",
 "zeroize",
- "zip 3.0.0",
+ "zip",
 ]

 [[package]]
@@ -6759,7 +6821,7 @@ dependencies = [
 "cfb",
 "chrono",
 "encoding_rs",
- "getrandom 0.3.4",
+ "getrandom 0.4.3",
 "image",
 "js-sys",
 "libc",
@@ -6780,18 +6842,18 @@ dependencies = [
 "wordcraft-proof",
 "wordcraft-render",
 "zeroize",
- "zip 3.0.0",
+ "zip",
 ]

 [[package]]
 name = "wordcraft-fonts"
 version = "0.12.0"
 dependencies = [
- "brotli-decompressor",
- "harfrust 0.13.3",
+ "brotli-decompressor 6.2.0",
+ "harfrust 0.15.0",
 "kurbo",
 "log",
- "skrifa 0.47.0",
+ "skrifa 0.49.0",
 "unicode-bidi",
 "unicode-script",
 "wuff",
@@ -6809,10 +6871,10 @@ dependencies = [
 "js-sys",
 "log",
 "proptest",
- "quick-xml 0.41.0",
+ "quick-xml 0.42.0",
 "wordcraft-doc",
 "wordcraft-geom",
- "zip 3.0.0",
+ "zip",
 ]

 [[package]]
@@ -6900,7 +6962,7 @@ version = "0.12.0"
 dependencies = [
 "image",
 "log",
- "vello_cpu",
+ "vello_cpu 0.3.0",
 "wordcraft-doc",
 "wordcraft-fonts",
 "wordcraft-geom",
@@ -6936,7 +6998,7 @@ dependencies = [
 "wordcraft-render",
 "wordcraft-zotero",
 "zbus",
- "zip 3.0.0",
+ "zip",
 ]

 [[package]]
@@ -7006,7 +7068,7 @@ version = "0.2.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "200a7b806377b65f1ff9a985874332f15357c87e5dd7855f35f06dade95b8b3d"
 dependencies = [
- "brotli-decompressor",
+ "brotli-decompressor 5.0.3",
 "bytes",
 "flate2",
 ]
@@ -7355,20 +7417,6 @@ dependencies = [
 "syn 3.0.6",
 ]

-[[package]]
-name = "zip"
-version = "3.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "12598812502ed0105f607f941c386f43d441e00148fce9dec3ca5ffb0bde9308"
-dependencies = [
- "arbitrary",
- "crc32fast",
- "flate2",
- "indexmap",
- "memchr",
- "zopfli",
-]
-
 [[package]]
 name = "zip"
 version = "9.1.0"
@@ -47,21 +47,21 @@ regex = { version = "1", default-features = false, features = ["std", "unicode",
 regex-automata = { version = "0.4", default-features = false, features = ["std", "syntax", "meta", "nfa-pikevm", "unicode"] }

 # text / rendering / formats
-skrifa = "0.47"
-harfrust = "0.13"
+skrifa = "0.49"
+harfrust = "0.15"
 # WOFF / WOFF2 web fonts added by the user (#582): pure Rust (MIT); its brotli and zlib decoders
 # (brotli-decompressor, flate2) are already in the tree.
 wuff = "0.2.9"
 # WOFF2's brotli stream, decoded ahead of wuff so its glyph point counts are checked first (#3703).
 # The same crate and version wuff already decodes it with (no new code in the build): pure Rust,
 # `forbid(unsafe_code)` in its default build, no_std-capable (builds for wasm), BSD-3-Clause/MIT.
-brotli-decompressor = "5"
-vello_cpu = "0.2"
+brotli-decompressor = "6"
+vello_cpu = "0.3"
 image = { version = "0.25", default-features = false, features = ["png", "jpeg", "webp", "gif", "bmp", "tiff"] }
 craft-pdf = { git = "https://github.com/storytold/craft-libs", rev = "92d392cff132eaf53e13afff77f38b5c11b73aa0", version = "=0.1.0", default-features = false, features = ["write"] }
 craft-update = { git = "https://github.com/storytold/craft-libs", version = "=0.1.0", rev = "92d392cff132eaf53e13afff77f38b5c11b73aa0", features = ["egui"] }
-quick-xml = "0.41"
-zip = { version = "3", default-features = false, features = ["deflate"] }
+quick-xml = "0.42"
+zip = { version = "9", default-features = false, features = ["deflate"] }
 # zlib streams (compressed metafile pictures in `.doc` drawings); already in the lock as a dependency of other crates.
 miniz_oxide = "0.9"
 cfb = "0.15"
@@ -76,7 +76,7 @@ sha1 = "0.11"
 sha2 = "0.11"
 hmac = "0.13"
 base64 = "0.23"
-getrandom = "0.3"
+getrandom = "0.4"
 zeroize = "1"
 # Unix open flags (O_NONBLOCK for the engine's checked file reads, #3666); already in the lock as a
 # dependency of other crates.
@@ -82,7 +82,7 @@ pollster = "1"
 # in the build through egui-winit, with the same features.
 arboard = { workspace = true, features = ["image-data"] }
 # The control server's random key.
-getrandom = "0.3"
+getrandom = "0.4"

 [target.'cfg(windows)'.dependencies]
 craft-update = { workspace = true }
@@ -26,6 +26,6 @@ chrono = { workspace = true }
 js-sys = "0.3"

 [dev-dependencies]
-hayro-syntax = "0.7.2"
-hayro-interpret = { version = "0.7.0", default-features = false, features = ["embed-fonts"] }
+hayro-syntax = "0.8.0"
+hayro-interpret = { version = "0.8.0", default-features = false, features = ["embed-fonts"] }
 hayro-cmap = "0.1"